Privacy Policy
This English translation is provided for convenience and to make the information accessible to English-speaking visitors. The German Privacy Policy remains authoritative.
1. Controller
The controller within the meaning of the General Data Protection Regulation (GDPR) and other data protection provisions is:
Zweirad Oberländer
Owner: Bettina Oberländer
Artur-Platz-Weg 5
41468 Neuss-Gnadental
Germany
Phone: +49 2131 103385
Email: kontakt@zweirad-oberlaender.de
2. General information on data processing
We process personal data only where this is necessary to provide our website, communicate with prospective and existing customers, handle service and other enquiries, take steps prior to entering into a contract, perform contracts, comply with legal obligations or safeguard legitimate interests, or where you have consented to processing.
The relevant legal bases include Article 6(1)(a) GDPR (consent), Article 6(1)(b) GDPR (contract and pre-contractual measures), Article 6(1)(c) GDPR (legal obligation) and Article 6(1)(f) GDPR (legitimate interests).
3. Hosting by IONOS
Our website is hosted by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany.
When you access our website, IONOS processes data required to provide and secure the service. According to IONOS, this includes the previously visited website (referrer), the requested page or file, browser type and version, operating system, device type, access time and an anonymised IP address. IONOS states that these data are processed in particular to ensure the security and stability of the service and to provide a high-quality service. Documented web-hosting visitor data is retained for eight weeks.
Our legal basis is Article 6(1)(f) GDPR. Our legitimate interest is the secure, stable and reliable provision of the website. Where IONOS processes personal data on our behalf, this is governed by a data processing agreement under Article 28 GDPR.
IONOS WebAnalytics
IONOS also evaluates web-hosting access data statistically using WebAnalytics. According to IONOS, no cookies are used, no personal visitor profiles are created and the IP address is anonymised. This analysis supports the technical and statistical evaluation of the website. The legal basis is Article 6(1)(f) GDPR; our legitimate interest is evaluating and improving our online service.
4. Email communication
If you contact us by email, we process your email address, where applicable your name, date and time, technical email and transport information, the content of your message and any attachments. We use IONOS services for business email. Emails to kontakt@zweirad-oberlaender.de are processed through the IONOS mail infrastructure.
Where the communication relates to a purchase, repair, order or other contractual relationship, the legal basis is Article 6(1)(b) GDPR. Other business enquiries are processed under Article 6(1)(f) GDPR; our legitimate interest is handling and responding to business communications.
5. Contact and workshop appointment request form
When you use our contact form or workshop appointment request form, we process the information you provide to handle your enquiry. The contact form collects your first and last name, telephone number, email address, subject and message. The workshop form additionally collects, depending on your entries, authorised brand, model, bicycle type, drive, requested service, preferred date and preferred time slot.
The form data is processed on the server, stored as a non-public backup in the protected WordPress administration area and emailed to kontakt@zweirad-oberlaender.de. It is sent through the IONOS mailbox using authenticated SMTP. After successful submission, an automatic acknowledgement is sent to the email address you supplied.
Article 6(1)(b) GDPR applies where your request concerns entering into or performing a contract. Article 6(1)(f) GDPR may apply to general enquiries; our legitimate interest is handling business enquiries and communicating with prospective and existing customers.
The backup stored in the website administration area is automatically deleted 180 days after receipt. Emails and data used for further processing are deleted when no longer required, unless statutory retention, evidence or limitation requirements apply. If an enquiry results in an order or a document that must be retained under tax or commercial law, the applicable statutory retention periods apply.
6. Display and language settings
When you choose light or dark mode, your selection is stored locally on your device in localStorage and in the technically necessary zo-theme cookie. Both contain only “light” or “dark”; the cookie is intended to remain for up to one year.
Only when you actively use the language switch, the selected language is stored in the technically necessary zo-lang cookie as “de” or “en” for up to one year. This allows language-neutral error pages to use your previous selection. These settings are used only for the requested display and not for analytics, advertising or tracking.
Storage and access are necessary for the display function you requested (Section 25(2) TDDDG). To the extent that personal data is processed, the legal basis is Article 6(1)(f) GDPR; our legitimate interest is providing the selected display in a user-friendly manner.
7. Map, directions and external links
On the contact page, a map provided by the OpenStreetMap Foundation is embedded only after you expressly select “Load interactive map”. No connection to the map service is made before that selection. Loading the map may transmit your IP address, browser and device information, referrer, access time and requested content. The legal basis is your consent through the deliberate loading action under Article 6(1)(a) GDPR and Section 25(1) TDDDG. See the OpenStreetMap Foundation Privacy Policy.
The loaded map and the “Plan route” link lead to Google Maps. Google Maps is not embedded in this website. You leave our website only after clicking the relevant link, and Google’s privacy terms then apply. The same applies to other external websites, including leasing partners.
The theme does not directly embed externally hosted web fonts, externally hosted advertising images or its own analytics or marketing services. Statistical analysis at hosting level by IONOS WebAnalytics is described in section 3.
8. Recipients and processors
Personal data is available only to parties that need it for the relevant purposes. IONOS is used in particular as a processor and technical provider for hosting and email. Processors are engaged under Article 28 GDPR where required.
9. Retention
We retain personal data only for as long as required for the relevant purpose or by law. IONOS currently states a retention period of eight weeks for documented web-hosting visitor data. Email, contact and service enquiries are retained according to the handling of the matter and any legal retention and evidence requirements.
10. Data security
We take appropriate technical and organisational measures to protect personal data. The website is provided over encrypted HTTPS/TLS. Administrative access is restricted to authorised persons, and WordPress and its components should be updated regularly.
11. Automated decisions and profiling
We do not use solely automated decision-making, including profiling within the meaning of Article 22 GDPR, that produces legal effects concerning you or similarly significantly affects you.
12. Your rights
Where the legal requirements are met, you have rights including access (Article 15 GDPR), rectification (Article 16), erasure (Article 17), restriction (Article 18), data portability (Article 20) and objection to certain processing (Article 21). You may withdraw consent at any time with future effect under Article 7(3) GDPR.
To exercise your rights, contact kontakt@zweirad-oberlaender.de.
13. Right to lodge a complaint
Under Article 77 GDPR, you have the right to lodge a complaint with a data protection supervisory authority. For businesses established in North Rhine-Westphalia, this may be the State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia (LDI NRW), Kavalleriestraße 2–4, 40213 Düsseldorf, Germany.
14. Changes to this Privacy Policy
We update this Privacy Policy when the processing on our website, the services used or the legal position changes.
Last updated: 26 August 2026